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Hewlett-Packard Company. Hewlett-Packard Company is the assignee of the above-referenced 
patent application by virtue of assignments recorded in the Assignment Records of the United 
States Patent and Trademark Office at Reel 012652, Frame 0810, and at Reel 014061, Frame 
0492. The inventor of the above-referenced patent application, John Joseph Mazzitelli, is not 
currently an employee of Hewlett-Packard Company and, therefore, is unavailable to Hewlett- 
Packard Company. Accordingly, I, L.Joy Griebenow, pursuant to M.P.E.P. §715.04, as a duly 
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I enclose hereto as Exhibit A a true copy of an invention disclosure form, with dates and 
portions redacted as noted, which was received from the inventor of the above-referenced 
patent application, John Joseph Mazzitelli, in the ordinary course of business as part of Hewlett- 
Packard Company's invention disclosure program. In accordance with Hewlett-Packard 
Company's invention disclosure program at that time, upon receipt of an invention disclosure 
document from an inventor, the invention disclosure document is dated with the date of receipt 
by the Legal Intellectual Property department of Hewlett-Packard Company and assigned a 
docket number. 

The invention disclosure form attached hereto as Exhibit A and directed toward the 
subject matter of the above-referenced application was prepared and provided to the Legal- 
Intellectual Property department of Hewlett-Packard Company while the inventor, John Joseph 
Mazzitelli, was working in the United States for and employed by Hewlett-Packard Company. 
The invention disclosure form attached hereto as Exhibit A and directed toward the subject 
matter of the above-referenced application includes a statement made by the inventor, John 
Joseph Mazzitelli, that the subject matter of the above-referenced application was incorporated 
into the Hewlett-Packard product "Total-e-Mobile 1.0." The invention disclosure form attached 
hereto as Exhibit A and directed toward the subject matter of the above-referenced application 
also includes a statement by the inventor, John Joseph Mazzitelli, indicating that the Total-e- 
Mobile 1.0 product was released on a date that occurred on or before October 31 , 2000. 

I hereby declare that all statements made herein of my own knowledge are true and that 
all statements made on information and belief are believed to be true; and further that these 
statements were made with the knowledge that willful false statements and the like so made are 
punishable by fine or imprisonment, or both, under Section 1001 of Title 18 of the United States 
Code, and that such willful false statements may jeopardize the validity of the application or any 
patent issued thereon. 
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tnstmctions- The information containe d in this document is COMPANY CONFIDENTIAL and may not be disclosed to others without prior 
authorization. Submit this disclosure to the HP Legal Department as soon as possible. No patent protection is possible until a patent application is, 
authorized, prepared, and submitted to the Government .. 



Descriptive Title of Invention: HTTP Cookie Proxy 



Name of Project: Universal Session Manager 



Product Name or Number: Total-e-Mobile 




Was a description of the invention published, or are you planning to publish? if so. the date(s) and publication(s): 

REDACT 

Was a product including the invention announced, offered for sale, sold, or is such activity proposed? If so, the date(s) and loeation(s): 

REDACT 

Was the invention disclosed to anyone outside of HP, or will such disclosure occur? If so, the date(s) and hame(s): 
REDACT 

11 a ny of the above situations wit occur within 3 months, call your IP attorney or theleQat Department n w at U89&4919 or 970498-4919. 



Was the invention described in a lab book or other record? If so, please identify (lab bpok#, etc.) 

REDACT 



Was the invention buillor tested? If so, the date: 
Yes, it was built in REDACT 



i and released in the Totai-e-Mobile 1.0 product in REDACT 



Was this invention made under a government contract? If so, the agency and contract number: 



REDACT 



Description of Invention: Please preserve all records of the . mention and attach additional pages for the following. Each additional page should 
be signed and dated by the inventor(s) and witness(es). 

A. Description of the construction and operation of the invention (include appropriate schematic, block, & timing diagrams; drawings;, samples; 
graphs; flowcharts; computer listings; test results; etc.) 

B. Advantages of the invention over what has been done before. 

C. Problems solved by the invention. 

D. Prior solutions and their disadvantages (if available, attach copies of product literature, technical articles, patents, etc.). 

Signature of Inventor(s): Pursuant to my (our) emf^-^^ I (we) submit this disclosure on this date: [ redact ]• 

John Mazzitelli 0^*7/1^ 5!? ACT HP Bluestone 



REDACT 



Employee No. Name 



/ /S&r&unT' 



Telnet Mailstop 



Entity & Lab Name. 



Employee No. Name 



Signature 



Telnet Mailstop 



Entity & Lab Name 



Employee No. Name 



Signature 



Telnet Mailstop 



Entity & Lab Name 



Employee No. Name" Sig^ure Telnet Mailstop Entity & Lab Name 
(If more than four inventors, include additional information on another copy of this form and attach to this document) 
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SicjnaturG OfWitneSS(es); (Please try to obtain the signature of the person(s) to whom invention Was first disclosed.) 

The invention was first explained to, and understood by, me (us) on this date; [ redact 


) 


Full Name Signature 


Dale of Signature 
REDACT 


Full Name Signature 


Date bf Signature 


Inventor & Home Address Information: [if more than four inventors, include addL Information on a copy of this form & attach to this document) 


Inventor's Full Name 




John Joseph Mazzitelii 




Street 

REDACT 


City State 
REDACT REDACT 


Zip 

REDACT 


Do you have a Residential P.O. Address? P.O. BOX City State 


Zip 


Greeted as -(nickname, middle name, etc) Citizenship 

United States of America 




Inventor's Full Name 


Street 


City State 


Zip 


Do you have a Residential P.O. Address? P.O. BOX City State 


Zip 


Greeted as (nickname, middle- name, etc.) Citizenship 




Inventor's Full Name 


Street 


City State 


Zip 


Do you have a Residential P.O. Address? P.O. BOX City State 


Zip 


Greeted as (nickname, middle name, etc.) Citizenship 




Inventor's Full Name 


Street 


City State 


Zip 


Do you have a Residential P.O. Address? P.O. BOX City State 


Zip 


Greeted as (nickname, middle name, etc.) Citizenship 
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Description of Invention: Please preserve all records of the invention and attach additional pages for the following. Each additional page should 

be signed and dated by the inventor(s) and v/itness(es). 

A. Description of the construction and operation of the invention (include appropriate schematic, block, & timing diagrams; drawings; samples; 
graphs; flowcharts; computer listings; test results; etc.) 

The HTTP Cookie Proxy is a component that is housed inside of the Universal Session Manager product which sits between a remote client 
. device and a web server. The Universal Session Manager and its internal HTTP Cookie Proxy component is currently implemented as a 
customized listener that plugs into the HP Bluestone Universal Listener Framework (ULF). The algorithm is as follows: 

1) Accept HTTP requests from the client device (e.g., a WAP.phone) 

2) Extracts a unique client identifier from that HTTP request that uniquely identifies the remote client. 

3) Adds any cookies belonging to that client to the request via an HTTP cookie header. 

4) Forwards the request (with the new HTTP cookie headers) to a web server. 

5) When the web server returns the HTTP response, the component will parse that response and extract all HTTP set-cookie headers. If any 
set-cookie headers are found, those cookies are stored in a cookie storage area for later retrieval when the client submits future HTTP requests 
(i.e. used in step 3). 

6) The HTTP Cookie Proxy passes the response unaltered back to the client 

Other than adding cookie headers to the forwarded HTTP request, no other modifications are made to the request and, no modifications are 
performed on the web server's HTTP response. By default, the cqokiesare stored in-process; that is to say, they are stored in the same Java 
Virtual Machine memory space as the HTTP Cookie Proxy; It is conceivable that you might want to store this cookie information in persistent 
storage (like a file system or database) for better fault tolerance. The HTTP Cookie Proxy has, therefore, been designed to allow for an 
implementation that does these things to plug in seamlessly. 

FIGURE A. 
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FIGURE A shows an example of how the Universal Session Manager (which houses the HTTP Cookie Proxy components) could be used to 
facilitate requests between a WAP phone and an HP Bluestone Universal Business Server (UBS) application. 
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FIGURE B. 




FIGURE B illustrates the Request Scenario - that is ( the flow diagram that indicates how an HTTP request from a client device flows through 
the HTTP Cookie Proxy to its final destination, that being a web server or application server: 
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FIGURE C. 




FIGURE C illustrates the Response Scenario - that is. the flow diagram that indicates how an HTTP response from a web or application server 
flows through the HTTP Cookie Proxy back to its requestor, that being a remote client device. 



B. Advantages of the invention over what has been done before. 

Without using this HTTP Cookie Proxy, some client devices cannot maintain state information and thus could not access certain web and/or 
application servers. The advantage to using this component is that now a device which previously had been unable to effectively use certain 
web arid application servers can now do so without failure. Another advantage is that the HTTP Cookie Proxy can be added to an application 
deployment without the application developer or the client device knowing that it is involved in the interaction between client and server. 
Therefore, it can be added to an existing or future application deployment without requiring additional coding effort to be expended. It snaps in 
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seamlessly and invisibly to the client and server programs. 



C. Problems solved by the invention. 

Some client devices do not have the capability to store HTTP cookies. This can lead to problems since some web and Application Servers pass 
cookies to clients in order to maintain session and state information between requests - without the ability to store cookies on a per-client basis, 
state and session information cannot be maintained across multiple requests from the same clienL The HTTP Cookie Proxy works around this 
problem by providing a mechanism by which the cookie information Is no longer required to be stored in the client device. 



D. Prior solutions and their disadvantages (if available, attach copies of product literature, technical articles, patents, etc.); 

A prior solution would be to force the web/application server developer to encode the cookie information in the returned anchor and form action 
URLs. The disadvantage to this is that it requires additional work on the application developer to specifically code their applications to do this 
additional, specialized handling for the specific devices that cannot handle cookies. Another disadvantage is that the URLs themselves may 
grow too long in length, depending on how the cookie information is encoded on the URL. Some devices may not or can not display or accept 
URL strings longer than a certain length. If that length is exceeded, the client will again be rendered useless with respect to its ability to interact 
with the web or application server. 
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